Good disassemble/debugging program?

Sorry for that^ Accidentally pressed submit.

But anyway, I'm looking for a good program for doing reverse engineering in. At some point in my past I used OllyDBG in Windows which, I think, is pretty darn good. But I can't find any similar application for *nix. I know dbg, ddd etc. But they they're not as "nice".

So any alternatives?

Thanks! :)
 
Truth is, there are none (nice. With nice i think something like IDA Pro, Turbo debugger, ollydbg, Immunity Debugger, SoftIce)

for linux there's at least Ida Pro (cli version)

you can disassemble with ht [editors/hteditor] (a bit), but you can't do nothing serious.

btw FreeBSD/Linux is open source, so you don't need to disassemble


However there is this project:
http://rr0d.droids-corp.org/


If you find anything interesting plz let me know,
I'm very interested in reverse engineering
 
killasmurf86 said:
btw FreeBSD/Linux is open source, so you don't need to disassemble
Click to expand...
While true you can use your fbsd/linux box to disassemble/analyze/reverse engineer windows executables.
 
fwiw, I had started to work on porting ollydbg to FreeBSD a couple years ago. Life got in the way but one of these days, Alice....one of these days.
 
killasmurf86 said:
However there is this project:
http://rr0d.droids-corp.org/
Click to expand...

Thanks for the link. I downloaded it and compiled it but when I kldloaded it the system panicked and restarted. I could begin to determine why but I'm more in the mood for some learning.. Hehe.

But as ephemera pointed out, I'm gonna go for gdb etc. first to get the hang of all the basics. It doesn't really matter if that's not imprinted into the brain anyway.

Oh, and drhowarddrfine please do soon! :e
 
killasmurf86 said:
Open Source Hex editor:
ht editor
http://hte.sourceforge.net/
in ports it's editors/hteditor
i like this editor because it doesn't have cli problems like giew
Click to expand...
I have been using hte the last few days and I think it's pretty good at what i does. Also the built-in assembling features are nice.

But I was thinking.. If you want to reverse engineer a binary with no debugging symbols and so on. Then gdb and the like are not very easy to use because the names are not readable. And you can't look at the source code either. How then does one step through a program to understand what it does?

So you can get some info by using objdump but still..
 
netrom said:
But I was thinking.. If you want to reverse engineer a binary with no debugging symbols and so on. Then gdb and the like are not very easy to use because the names are not readable. And you can't look at the source code either. How then does one step through a program to understand what it does?
Click to expand...
Using a lot of blood, sweat and tears ;)
 
SirDice said:
Using a lot of blood, sweat and tears ;)
Click to expand...

and IDA Pro


Ida pro is great thing....
AND latest version have build in debugger, AND a feature (plugin probably) to convert asm code back to C code (if i recall correctly it was named Hex-rays decompiler)

http://www.hex-rays.com/decompiler.shtml


Good book on subject is:
Hackers disassembling uncovered by Kriss Kaspersky
http://www.amazon.com/Hacker-Disassembling-Uncovered-Techniques-Programming/dp/1931769222

only thing it heavily relies on Soft-Ice and unfortunately this peace of great software is dead.
http://en.wikipedia.org/wiki/SoftICE
 
killasmurf86 said:
and IDA Pro

Ida pro is great thing....
AND latest version have build in debugger,
Click to expand...
Very true indeed. The full version is quite expensive though :(

Good book on subject is:
Hackers disassembling uncovered by Kriss Kaspersky
http://www.amazon.com/Hacker-Disassembling-Uncovered-Techniques-Programming/dp/1931769222
Click to expand...
A very good book on the subject but it mostly focuses on how to get at passwords and/or serials in code and how to prevent hackers getting them.

only thing it heavily relies on Soft-Ice and unfortunately this peace of great software is dead.
http://en.wikipedia.org/wiki/SoftICE
Click to expand...
IIRC it was part of driverstudio and last I tried it worked perfectly on windows XP.
 
This is old and forgotten thread, but I wanted to point out
devel/cgdb

I'm starting to like it, at least it seams to be much easier to use than pure gdb for gdb noob like me :)

mostly because you see source all the time, and don't have to type list.... etc

(Still exploring it)
 
You must log in or register to reply here.
Back
Top